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O (57) Abstract: An apparatus for allowing operation of equipment by an authorized operator comprises a biometric scanner (20) 
receiving a biometric input from an authorized operator, and transmitting an authorization signal as long as the biometric input is 

O received from the authorized operator. The apparatus further includes an equipment control system (18) that allows the equipment to 
operate substantially only while the equipment control system receives the authorization signal from the biometric scanner (20), and 
& that prevents the equipment from operating shortly after the authorization signal is no longer received from the biometric scanner. 
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BIOMETRIC CONTROL OF EQUIPMENT 

FIELD OF THE INVENTION 
The invention relates to methods and apparatus for preventing operation of 
equipment by unauthorized persons. 

BACKGROUND OF THE INVENTION 
5 According to National Fire Protection Agency regulations covering aircraft 

refueling, a deadman control must be used with the valve that controls the flow of fuel 
to an aircraft, and deadman controls shall be designed to preclude defeating their 
intended purpose. Further, the fuelling operator should monitor the panel of the 
fuelling equipment and the aircraft control panel during pressure fuelling or should 
10 monitor the fill port during overwing fuelling. According to the regulations, use of 
any means that defeats the deadman control shall be prohibited. A deadman switch 
should be used with fuel flow control valves such as a hydrant pit valve, a tank outlet 
on a tank vehicle, a separate valve on the tank vehicle, or on a hose nozzle for 
overwing service. 

15 Under typical regulations, a deadman switch should be used when performing 

any pressure fueling or tender filling operation. Deadman switches are designed to 
safeguard against over filling circumstances or situations that may delay the 
suspension of fuel flow. Fuel flow stops when the deadman device is released. 
Ideally, a deadman switch should not be jammed or bypassed during any fuel transfer 

20 operation. Deadman switch types include the electromechanical deadman switch, 
pneumatic deadman switch (sometimes called the air deadman switch, and 
combination electromechanical/pneumatic types. The deadman switch is actuated, for 
example through being in the hands of the operator, during a refueling process. 

However, a conventional equipment control system, such as a conventional 

25 deadman switch, provides no method of identifying the operator and so may be used 
by any person, even those not authorized or trained to use the equipment. Also, 
conventional equipment controls are susceptible to jamming or locking in an 
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operating position. These conventional systems allow both authorized and non- 
authorized personnel to purposely jam existing deadman switches into an operating 
position. 

There are also many other circumstances where an authorized person such as 
5 an authorized operator needs to be in proximity to the equipment or operation. These 
circumstances may include any hazardous operation (such as a fueling operation), 
operation of equipment, medical monitoring situations, operation of equipment 
requiring some kind of safety interlock system, and the like. Conventional equipment 
control methods do not attempt to identify an authorized operator. 

1 o SUMMARY OF THE INVENTION 

An apparatus for allowing operation of equipment by an authorized operator 
comprises a biometric scanner receiving a biometric input from an authorized 
operator, and transmitting an authorization signal as long as the biometric input is 
received from the authorized operator. The apparatus further includes an equipment 

15 control system that allows the equipment to operate substantially only while the 
equipment control system receives the authorization signal from the biometric 
scanner, and that prevents the equipment from operating shortly after the 
authorization signal is no longer received from the biometric scanner. 

A timing delay between the end of the authorization signal and the prevention 

20 of equipment operation can be introduced according to the application. In fueling 
applications, the equipment control system may prevent the fueling equipment from 
operating within ten seconds or less, such as within five seconds, of the authorization 
signal being no longer received from the biometric scanner. In other applications, the 
timing delay may be longer, allowing an operator to provide biometric input at 

25 intervals. The intervals may correspond to typical required intervals between deadman 
switch operations. 

The authorization signal may be a wireless signal, allowing the biometric 
scanner to be a portable device transmitting a wireless signal to the equipment control 
system. The biometric scanner may include a fingerprint reader or other biometric 
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sensor. The biometric scanner further may further include a memory, the biometric 
scanner identifying the biometric input as being from the authorized operator by 
comparing the biometric input with stored biometric data in the memory. 

Examples of the present invention can be used with, or replace, deadman 
5 switch based systems. For example, a signal can be provided to actuate a deadman 
switch as long as a biometric input is provided to the biometric scanner. Examples of 
the present invention include fueling systems, such as airport fueling systems where 
actuation of a deadman switch is required to operate the fueling system. 

A process for allowing operation of equipment by an authorized operator 

10 comprises receiving a biometric input from an operator, determining if the biometric 
input is from the authorized operator, transmitting an authorization signal while the 
biometric input is provided by the authorized operator, operating the equipment only 
while the authorization signal is received by an equipment control system, and 
disabling the equipment shortly after the authorization signal is no longer received by 

15 the equipment control system. The process may be a fueling process at an airport, and 
disabling the equipment can occurs within ten seconds or less, such as within five 
seconds, of the authorization signal being no longer received by the equipment control 
system. 

BRIEF DESCRIPTION OF THE FIGURES 
20 Figure 1 is a schematic of a base station providing a signal to an equipment 

controller, the base station receiving a signal from a biometric scanner; 

Figure 2 is a schematic of an apparatus according to the present invention used 
in a fueling system. 

Figures 3 shows an example of a biometric scanner which can be used in 
25 examples of the present invention; 

Figure 4 is a schematic of an example biometric scanner according to the 

present invention; 

Figure 5 is a flowchart showing a possible operation of a biometric scanner; 

and 
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Figure 6 is a flowchart showing a possible method of operation for a base 

station. 

DETAILED DESCRIPTION OF THE INVENTION 
An apparatus for equipment control allows operation of die equipment only 
5 while an authorized operator provides a biometric input to the control system. The 
control system can include a portable biometric scanner in the possession of the 
operator. Examples of the present invention include an apparatus that provides 
identification of authorized persons from a biometric input, and which prevents use of 
equipment if the operator is not continually identified as an authorized operator. 
10 Removal of the finger will cause the control system to shut the valve and stop 
fuelling. The biometric fingerprint of the authorized operator is used to begin the 
fuelling process. 

A biometric scanner can be used to allow operation of the controlled 
equipment. The biometric scanner may include a fingerprint reader and/or other 

15 biometric sensor. The operator places a finger on the fingerprint reader, and the 
fingerprint reader reads the fingerprint of the operator and compares this input 
fingerprint with fingerprints of authorized operators. Authorized fingerprints can be 
stored in a memory of the biometric scanner. Fingerprints can be deleted from the 
memory if, for example, the corresponding person is no longer an authorized operator. 

20 For example, fingerprints of those that have left the job, or have otherwise lost 
authorization, can be deleted. Hence, if an equipment operator is fired or leaves the 
job without notice, unauthorized use by the person can be prevented, hence possibly 
preventing damage to the equipment and potentially catastrophic safety hazards. 

Hence, an improved method for preventing the unauthorized use of equipment 

25 by an unauthorized operator includes providing a biometric scanner to an authorized 
operator, detecting whether the authorized operator is in possession of the scanner by 
receiving a biometric input from the operator, and only allowing the performance of 
an operation if the biometric scanner is in possession of the authorized operator. 
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In the field of airplane refueling, after placing the nozzle of a fuel pump into 
the adaptor of an aircraft, regulations require that an operator actuate a handheld 
deadman switch in order to start pumping fuel into the aircraft. In this example, the 
controlled equipment is an aircraft fueling system. Hazards, such as over-fueling or 
5 • under-fueling due to operation of equipment by an unauthorized person, can be 
avoided by only. allowing the fueling system to operate if the operator provides a 
recognized biometric input. 

An example apparatus according to the present invention includes a hand-held 
biometric scanner which transmits an authorization signal to a base station only as 

10 long as an authorized operator provides a recognized biometric input to the biometric 
scanner. The base station allows operation of the controlled equipment, for example 
by causing actuation of a deadman switch, only as long as the authorization signal is 
received from the scanner. Hence, operation of the controlled equipment may no 
longer be possible if any of the following occur: the scanner is handed to an 

15 unauthorized person; the scanner is no longer able to transmit the authorization signal 
to the base station (for example, the authorization signal may be a wireless signal, and 
the scanner might be out of range of wireless transmission to the base station); or the 
authorized person no longer provides the biometric input (for example, taking a finger 
off a fingerprint reader). 

20 For example, if the biometric scanner includes a fingerprint reader, the fuel 

pumping system is operable only as long as an authorized fueling operator has a 
finger in contact with the fingerprint reader. This safety feature ensures the presence 
of the operator until the fueling operation is complete. Fingerprint authentication can 
therefore be used to better improve the current aircraft fueling method. Current 

25 refueling systems do not incorporate a true deadman device, the new biometric system 
will be fully compliant with the National Fire Protection Agency's Article 407. 

In an example of the present invention, each fuelling truck has its own unique 
base station, and each base station responds to its own set of handheld biometric 
scanners used by the operators. The biometric scanners (which may be handheld 

30 remotes) used with the base station of one truck may be configured so that they 
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cannot be used with another truck, therefore further lowering the chance of 
unauthorized use. For example, each truck base station may have a unique associated 
receiving frequency, or require a particular authorization code to be transmitted by an 
associated biometric scanner. 
5 Figure 1 shows a schematic of an example system according to an example of 

the invention. The system includes a base station 10 which comprises a switch circuit 
12 and receiver 14. The switch receives electrical power from a power source 16 and 
when energized provides an electrical signal to equipment controller 18. The system 
also includes a biometric scanner 20, which comprises a processor 22, transmitter 24, 

10 memory 26, clock 28, and fingerprint reader 30. 

An operator is in possession of the biometric scanner 20 and places a finger on 
fingerprint reader 30. The presence of the finger is detected, and the fingerprint is 
read and compared with stored fingerprint data in memory 26. If a match is made, the 
person is identified as an authorized operator of the system. The biometric scanner 

15 can be configured so that the authorized person must keep their finger on the 
fingerprint reader continuously, or substantially continuously (for example, with 
momentary breaks of a few seconds or less, for the system to operate. 

The transmitter 24 then transmits an authorization signal to receiver 14 within 
the base station 10. When the receiver 14 receives the authorization signal, the switch 

20 12 is energized, sending an electrical signal to the equipment controller. Equipment 
controlled by the controller operates, or can be operated, while the authorization 
signal is transmitted by the scanner. 

The switch circuit 12 operates to send an electrical signal to the equipment 
controller during times when the receiver 14 receives the authorization signal from 

25 transmitter 24. If the person removes their finger from the fingerprint reader 30, the 
authorization signal is terminated, and the switch 12 turns off, disabling any 
equipment controlled by the controller 1 8. 

In this example, the base station 10 and equipment controller 18 (which may 
be a deadman switch) form an equipment control system that allows equipment 

30 operation so long as an authorization signal is received from the biometric scanner. 
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There may be a slight time delay between removing a finger from the 
fingerprint reader and turning off of the switch, so as to allow continuous operation of 
the equipment even if a finger is briefly removed from the fingerprint reader. The 
time delay between removing a finger from the reader 30, and turning off of any 
5 equipment can be fairly short, for example less than ten seconds. In aircraft refueling 
application, the time delay can be less than five seconds, such as approximately two 
seconds or less. The time delay can be provided by a suitable electrical circuit in the 
scanner, the base station, or the controller 

The biometric scanner 20 is preferably a portable device, such as a portable 

10 device configured as a key fob, handheld device, or other portable device. The 
biometric scanner can be a portable electronic device having additional functionality, 
such as a cell-phone, PDA (personal digital assistant), vehicle remote keyless entry 
system (in which case, the biometric scanner may also provide a vehicle security 
feature by only allowing an authorized operator to open and/or use a vehicle), and the 

15 like. 

The biometric scanner may be built in to a wearable object, for example 
having additional functionality, such as a wristband, glove (a fingerprint reader may 
be on the inside of the glove), eyeglass or safety goggles frame (which may include an 
iris scanner), hat (which may include a face recognition feature using a cap-mounted 
20 camera), footwear (which may include a pressure sensor or toe scanner), or other 
object 

The biometric scanner may also operate as an identity card, for example 
having an image of the authorized operator on the housing of the biometric scanner. 
The authorization signal from the biometric scanner may also be transmitted to other 
25 devices, such as restricted access entryways (gates, doors, and the like), allowing the 
person to pass through. The biometric scanner may also transmit a position signal 
when the biometric input is provided, allowing the position of the operator to be 
monitored. 

The communications link between the transmitter 24 and the receiver 14 may 
30 be a wireless link, such as a radio link, so that the authorization signal is a radio 
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signal. The authorization signal may also be provided by a permanent cable link (such 
as an electric cable or a fiber optic cable), optical signal (such as a laser), IR, or 
ultrasound signal. The authorization signal may be modulated. The signal modulation 
may, for example, convey an authorization code if an authorized operator is 
5 identified. 

Figure 2 illustrates another configuration of an equipment control system, 
comprising biometric scanner 40, base station 42, deadman switch 44, valve system 
46, fuel storage tank 48, pump 50, and vehicle 52 receiving fuel. 

The biometric scanner 40 provides a wireless signal to the base station 42 

10 when an authorized operator gives a recognized biometric input to the biometric 
scanner. Actuation of the deadman switch 44 is necessary to open valves within the 
valve system 46, allowing fuel to be pumped from the fuel storage tank 48 to the 
vehicle 52. The deadman switch actuates, enabling the valve system to allow fuel to 
pass from the fuel storage tank to the vehicle. For example, when the deadman switch 

15 receives an electrical signal from the base station, this may cause a valve or passage 
within the valve system to open. The electrical signal to the deadman valve is only 
provided when an authorization signal is received by the base station from the 
biometric scanner. Fuel can men pumped by the pump from the storage tank to the 
vehicle. The fuel storage tank may be a fuel tanker, and the vehicle may be an 

20 airplane. 

In this example, equipment control includes actuation of the deadman switch. 
For example the deadman switch may be located within a fuel pump handle. An 
electrical deadman switch is actuated on receipt of a suitable electrical signal from the 
base station. For aircraft fueling, typically a 14 V electrical signal is necessary to 

25 actuate the deadman switch. 

If the deadman switch is mechanical (such as a pneumatic deadman switch) an 
electrically powered actuator may be provided, configured to actuate the deadman 
switch on receiving an electrical signal from the base station. In this example, the base 
station provides the electrical signal necessary for operation of the fuel pump. The 

30 base station may also include an electrically powered actuator, and actuate the 
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deadman switch through a mechanical, rather than electrical, coupling. In other 
examples, the base station and deadman switch can be integrated into a single 
equipment controller, which itself may be part of the equipment to be controlled. 

Figure 3 shows a view of a biometric scanner which can be used in examples 
5 of the present invention. The biometric scanner comprises housing 60, slidable cover 
62 with an optional gripping surface 68, attachment ring 64, and fingerprint reader 66. 
An operator slides back the slidable cover and places a finger on the fingerprint reader 
66. If the fingerprint is recognized as being that of an authorized operator, the 
biometric scanner transmits an authorization signal, in this case a wireless signal, to 
10 the base station. When not in use, the slidable cover can be pushed back to protect the 
fingerprint reader. A commercially available device manufactured by MicroLatch™ 
can be used for fingerprint identification, and adapted for use with examples of the 
present invention. 

Figure 4 shows a schematic diagram for an example biometric scanner. The 
15 scanner comprises biometric sensor 80, processor 82, transceiver 84, antenna 86, 
memory 88, clock 90, signal 92, and position sensor 94. 

The biometric sensor 80 may be a fingerprint reader, iris scanner, or other 
sensor providing an electrical signal correlated with a unique personal identifier. The 
biometric scanner may comprise one or more biometric sensors selected from: 
20 fingerprint reader (as used here, the term includes palm reader, toe-print reader, or 
other reader detecting skin topographies such as fingerprints); face recognition (the 
sensor may be an imaging sensor coupled to a face recognition software system); limb 
configuration sensor (for example, characterizing relative finger lengths, bone 
structure, vein structure and/or other configuration of hand, arm, foot, legs, or other 
25 anatomical feature); eye scanner (such as a retinal scanner or iris scanner); odor 
detector (including respiration component sensors); voice recognition sensor; gait 
sensor or other motion sensor (a characteristic motion may be sensed as a biometric 
input); DNA sequencer (for example receiving DNA as a biometric input); 
electromagnetic receiver (for example, receiving brainwaves, transmissions from 
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body-implanted transmitters, or transponder system characterizing the transient 
response of a person to an electromagnetic pulse); or other biometric sensor. 

The biometric sensor may also determine that the biometric input is being 
provided by a living person, for example by measuring an associated pulse or other 
5 physiological indication of life. 

The signal 92 may be a signal activated when an authorized operator is 
identified. The signal may comprise an indicator lamp (such as a light-emitting diode) 
energized when an authorized operator is identified, a visual representation on a 
display, illumination of the biometric sensor, haptic signal, or other operator interface. 
10 The position sensor 94, which is optional, may be a GPS sensor, cellphone- 

based triangulation device, or other device that provides an absolute position or a 
relative position relative to the base station. 

If a biometric input corresponding to an authorized use is recognized, an 
authorization signal is transmitted using the transceiver and antenna. The biometric 
15 scanner may additionally receive signals from the base station. For example, the 
device may be activated after receiving an activation signal from the base station. 

Figure 5 shows a possible method of operation of a biometric scanner. The 
method of operation may be provided by a software program executed by a processor 
within the biometric scanner. In the example below, the biometric input is the 
20 placement of a portion of a finger on the fingerprint reader, a fingerprint reader then 
reading input fingerprint data from the finger. 

Box 100 corresponds to detecting a finger on the fingerprint reader. If no 
finger is detected, the present process comes to an end. If a finger is detected, 
corresponding to the "y es " option on the figure, the fingerprint can then compared 
25 with authorized fingerprints. 

Box 102 corresponds to determining if the fingerprint is that of an authorized 
operator. The input fingerprint may be compared, for example, to authorized 
fingerprints stored in a memory of the biometric scanner. Authorized fingerprints may 
also be stored at a remote location, such as in a computer database accessible by the 
30 scanner, or on the base station. Fingerprints may be reduced to numerical data to 
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reduce data storage requirements, as is known in the art. Certain distances between 
typical fingerprint features may be measured, and converted into numerical 
parameters. If the fingerprint is not that of an authorized operator, corresponding to 
"no" on Figure 5, the process comes to an end. 
5 Box 104 corresponds to an optional timing delay. For example, if an 

authorized operator is detected, a reset pulse can be sent to a timer. If no reset pulse is 
received within a timing period, the timer signal terminates. If the timer has a two 
second timing period, the timer signal terminates two seconds after the finger is 
removed. This allows continuous operation of controlled equipment with momentary 

10 removal of the finger from the fingerprint reader. The timing delay is optional, and 
analogous circuitry may be provided in the base station 

Box 106 corresponds to transmitting an authorization signal to the base 
station. The authorization signal is transmitted as long as a fingerprint of an 
authorized operator is detected (subject to any timing modifications as described 

15 above in relation to box 104). The transmission is started if the authorized operator is 
detected for the first time, or maintained if the fingerprint was previously detected. 

Box 108 is optional, and corresponds to providing operator feedback, such as 
an indicator light, to the operator showing if authorized status is detected. 

If a fingerprint is detected, but cannot be identified as an authorized 

20 fingerprint, the operator may be prompted to clean the finger, reposition the finger, or 
otherwise improve the characteristics of the input fingerprint. 

The process cycles until either no authorized fingerprint is detected, or the 
fingerprint detected is not recognized as that of an authorized operator, in which case 
the process comes to an end indicated by box 101. In practice the fingerprint reader 

25 will be sampled at intervals, such as every second, to determine if a finger is present. 
The fingerprint reader may send a signal starting this process if a finger is detected. A 
finger may be detected by the presence of an input fingerprint, or using, for example, 
a capacitive sensor responsive to touch pressure or electrostatic signals from the 
finger. 
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This method may be used with other types of biometric indicator, such as iris 
scans and the like. The indicator light 108 and timing delay 104 are optional and can 
be omitted. Similarly, the authorization step may in some examples be omitted. It 
may be sufficient that any person is present for transmission of a signal in box 104. 
5 In other examples, the biometric scanner transmits biometric data to the base 

station, and the base station identifies the biometric data as being from an authorized 
operator. In this example, the authorization signal transmitted by the biometric 
scanner includes biometric data. The authorization signal is only transmitted while an 
authorized operator provides a biometric input, as if a non-authorized person provides 
10 the biometric input the transmitted signal cannot contain the necessary biometric data, 
and hence cannot act as an authorization signal. 

Figure 6 shows a schematic of a possible method of operation of a base 

station. 

Box 120 corresponds to detecting a signal from the biometric scanner. If no 
15 signal is detected, a controller in communication with the base station is turned off 
The base station may operate directly as the equipment controller, and may be part of 
the equipment. 

Box 122 is optional, and corresponds to checlcing that additional required 
parameters are within acceptable ranges when an authorization signal is detected. 
20 Additional parameters may include operating temperature, location of the operator, 
provision of additional authorization codes, provision of billing or payment 
information, fuel pressure (for refueling applications), time, other ambient conditions, 
or other parameters that are required to be within a certain range for the operation to 
proceed. 

25 Box 124 corresponds to an optional timing delay, such as discussed above in 

relation to Figure 5. 

Box 126 corresponds to liiming or keeping on an equipment controller, or the 
equipment itself. This may comprise provision of power to equipment, or an electrical 
signal to a deadman switch, or other switching system. 
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Box 121 is reached if no authorization signal is received, or if additional 
parameters are outside of acceptable limits, and corresponds to deactivating an 
equipment controller. This may correspond to shutting off the fuel supply to an 
airplane, turning off equipment, or otherwise stopping an operation that requires the 
5 presence of an authorized person. 

The base station may provide an operation signal while the authorization 
signal is received from the biometric scanner. In other examples, the base station may 
provide a turn-on signal when the authorization signal is initially received, and a turn- 
off signal when the authorization signal is no longer received, or has not been 

1 0 received for a predetermined timing delay. 

Examples of the present invention include improved aircraft fueling systems. 
In an illustrative example, an operator is provided with a biometric scanner including 
a wireless transmitter, which transmits an authorization signal to a base station when a 
biometric input is received. The base station receives electrical power from a vehicle 

1 5 battery, and if an authorization signal is received from the biometric scanner, the base 
station provides an electrical signal to the handle input of the deadman switch of a 
fuel handle. In this example, the base station includes a wireless receiver, possibly a 
wireless transceiver, and receives typically twelve volts from a vehicle battery as an 
input, and provides the fourteen volts output that is typically required to actuate a 

20 deadman switch, the electrical signal being directed to a handle input inside the 
refueling vehicle. 

The biometric scanner can be a fingerprint reader in a portable device, the 
biometric scanner also including a dedicated power supply in the form of one or more 
batteries, and a wireless transmitter to transmit the authorization code. The biometric 

25 scanner can be in wireless communication with the base station. The base station can 
be located in the cabin of a refueling vehicle where it receives an input voltage from 
the vehicle battery. When an authorized person puts a finger on the fingerprint reader, 
the scanner authenticates the authorization, of the operator, sends a authorization 
signal to the base station, and sends an output voltage of fourteen volts to the 

30 deadman handle input in the vehicle cabin. This example is particularly useful in an 
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improved aircraft refueling system. Fuel flow can then be provided from the refueling 
vehicle to the aircraft. The fourteen volts output is provided as long as a finger of an 
authorized operator is on the fingerprint reader. As soon as the finger is removed 
from the scanner, the output voltage falls to zero, the deadman switch in the fueling 
5 handle no longer receives the required fourteen volts, and the fuel flow to the aircraft 
is shut off. 

In examples of the present invention, the biometric scanner may have low 
power (less than one watt, to avoid sparking hazards), a working distance of less than 
50 feet, may have multiple frequencies for multiple authorized operators (such as fuel 

10 vehicle operators) such as a frequency of 300 MHz with 256 identifications. Since the 
wireless devices use such low wattage and frequency ranges, no licensing 
requirements are necessary. The biometric scanner can be handheld, and may use a 
rechargeable or long-life battery as a dedicated power supply. Different wireless 
modulation patterns can also be used to differentiate different biometric scanners. 

15 In fueling applications, the biometric scanner should not generate any spark or 

similar combustion danger. The fueling process can have a shutoff time of less than 
approximately two seconds after the recognized biometric input terminates (for 
example, a finger removed from a fingerprint reader). The biometric scanner can 
provide a reasonably quick authentication of the operator, and can operate under both 

20 low and high temperatures typically found in an outdoor environment. The surface of 
the fingerprint reader may be heated to remove condensation or ice. 

The biometric scanner in the possession of the operator may have a wireless 
communication to the equipment controller. In other examples, the scanner may be 
built in to a base station, deadman switch, or other equipment control apparatus. In 

25 other examples, the base station and controller may be integrated into a single device, 
or the equipment may include the function of the base station, for example having a 
radio receiver requiring an authorization signal before the equipment can operate. The 
base station may receive authorization signals from one or more biometric scanners, 
may only respond to a single biometric scanner, and may have alternative ways of 



WO 2006/118555 



PCT/US2005/010612 



-15- 

providing an authorization signal, such as keying in an identification code or holding 
down a switch. 

In examples of the present invention the biometric scanner may be the 
dimensions of a garage door opener, and may be similarly clipped to a sun visor of a 
5 vehicle. The biometric scanner provides a wireless or authorization signal when a 
biometric input is received from an authorized operator, for example when the finger 
of an authorized operator is on the fingerprint reader, and no longer provides the 
authorization signal after the finger is removed. 

A suitable biometric scanner having a fingerprint reader may be adapted from 
10 commercially available designs, such as the fingerprint scanner of MicroLatch™, or 
as described in U.S. Patent Application Publication No. 2003/0032407 to Mages. The 
biometric scanner may have an internal antenna, external antenna protruding from its 
housing, or may connect to a longer antenna, for example in a vehicle. 

Airport fueling regulations generally require that an aircraft fueling system has 
15 a deadman switch. Examples of the present invention go beyond the safety 
requirements of such regulations by allowing authentication of the operator. 

Furthermore, in examples of the present invention, the biometric scanner is 
portable, enhancing operator mobility to improve process monitoring. In airplane 
fueling applications, the operator can move around, for example, to monitor the panel 
20 of fueling equipment, aircraft control panel during pressure fueling, and also can 
monitor fill ports during over- wing fueling. Hence, the operator need not be restricted 
to any fixed mechanical device. 

In an example of the present invention, the operator is not required to stand 
depressing a mechanical switch as in certain conventional systems. Examples of the 
25 present invention provide all of the benefits of a deadman fueling system, while 
adding authentication of the operator identity, and allowing the operator mobility to 
investigate any potential safety hazards. The biometric input may not require any 
effort by the operator. For example, the operator may just rest a palm or finger onto a 
fingerprint reader. In other examples, the operator stands or sits where other biometric 
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input can be collected, for example by an imaging sensor (for face recognition), or iris 
or retinal scanner. 

Biometric scanners can be built in to vehicles or other equipment. For 
example, a steering wheel or other surface may include a fingerprint reader. Image 
5 sensors may be built into the vehicle cabin. 

The system can be used with any kind of fuel control valve, such as a hydrant 
pit valve, at the tank outlet on a tank vehicle, on a separate valve of the tank vehicle, 
and on a hose nozzle of an over-wing servicing system. 

The fingerprint authentication requirement also makes it difficult to defeat the 
10 deadman switch feature. Conventional mechanical controls or interlocks can be 
jammed open using pieces of metal or taped open or otherwise permanently opened 
without the requirement of an operator being present. This can cause a very serious 
safety hazard. Also, conventional deadman switches can be successfully operated by 
any person, whatever their relationship to the owner of the equipment. However, with 
15 the example improved apparatus described herein, a biometric scanner can accurately 
detect the presence of an authorized operator. 

The biometric scanner may also have a pulse sensor, or similar, so that, for 
example, a fingerprint cannot be transferred to the surface of the fingerprint reader 
using an adhesive tape, silicone mold, dismembered finger, or similar method. 
20 An example biometric scanner may be in the form of a wireless transmitting 

portable device having a fingerprint reader, the scanner possibly having the size of a 
key fob. For example, the wireless transmission of a biometric scanner may operate at 
approximately 433.92 MHz, can be SAW resonator locked, use AM ASK 
transmission modulation, Keeloq™ code hopping technology, and have a 50 foot 
25 maximum range. All parameters may be variable according to the desired application 
and performance. 

An example fingerprint reader which can be used in a biometric scanner is a 
Touchip™ fingerprint reader, which typically allows up to one million reads and 
withstands up to 15 kV air discharge onto the sensor surface. This fingerprint reader 
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has a false acceptance rate of typically .01 percent. Other fingerprint readers can be 
used. 

The biometric scanner may include one or more biometric sensors to 
determine if an operator is an authorized operator that is permitted to operate 
5 equipment. Biometric sensors may scan or otherwise analyze a fingerprint, toe print, 
exhalation components, heartbeat (including EKG signal), iris patterns, operator 
weight (for example standing on a sensor, the sensor detecting natural fluctuations of 
a standing person due to muscular contractions), electromagnetic field detection 
including brain wave detection, and the like. 

10 Communication between the biometric scanner and the base station may take 

the form of radio frequency electromagnetic radiation, optical, IR, or other 
electromagnetic radiation. The communication may also be non-wireless, for 
example an electrical cable or fiber optic cable. The radio communication may be 
AM or FM modulated; similarly other electromagnetic links may be modulated, for 

1 5 example an infrared link may be modulated. 

Examples of the other applications include fueling of vehicles other than 
aircraft, recognition of an operator and automatic debit for payment, and the like. For 
example, an automobile fueling system may comprise a fuel pump that dispenses fuel 
on receipt of an identifying code provided by a biometric scanner. The person 

20 associated with the identifying code can then be automatically billed for the fuel 
purchased, in a similar manner to use of a bank debit card. 

A biometric scanner, such as a scanner including a fingerprint reader, may be 
included into an improved gas pump handle,, for example to only allow the gas pump 
to be used by an authorized person, or for automatic identification and billing of the 

25 person using the gas pump. The pump may be mechanically latched on as long as a 
finger is placed on a fingerprint reader. The fingerprint reader may be part of the 
pump handle, otherwise part of the pump assembly, or a portable unit. 

In examples of the present invention, repetitive strain injuries caused by the 
need to physically hold down a lever of a deadman switch or other interlock can be 

30 avoided. In examples of the present invention a person only need contact a finger 
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onto a fingerprint reader. The fingerprint reader may be adhered to a person's finger, 
or the biometric scanner may be mechanically attached to a person's hand, for 
example using a strap. In other examples, a person need only stand where their face 
can be recognized by a face recognition system. 
5 Multiple biometric scanners may be used, for example a first scanner for an 

authorized operator, and a second scanner for a fuel purchaser, airplane pilot, or other 
vehicle operator. Security can be increased by requiring multiple authorized 
biometric inputs. 

The biometric scanner may also include a position sensor, for example, which 

10 provides information on the relative proximity of the operator to the base station. 
This can be used in an improved safety interlock system, in which an operator has to 
be a certain distance away from a dangerous piece of equipment. Also, it can be used 
to ensure that a person is close enough to a piece of equipment, such as a fuel pump, 
so that the person may deal with any dangerous situations quickly. 

15 The biometric scanner can be included as part of another portable electrical 

device, such as a cell phone, vehicle operation device such as an automatic unlocker, 
PDA (personal digital assistant), or other electronic device that may be conveniently 
carried by the operator. 

Examples of the present invention also prevent an authorized operator from 

20 getting a non-authorized person, such as an unskilled colleague, to fill in for them 
while the authorized operator leaves the proximity of a dangerous process such as 
airplane refueling, or operation of equipment. 

In other examples, it may only be necessary for a person (not any particular 
person) to be present. The biometric scanner may provide an authorization code so 

25 long as it receives a biometric input from a person, but need not verify that the 
received biometric input is from an authorized person. For example, an input 
fingerprint can be identified as being provided by a living human, without 
identification. 

Stored biometric data used for identification may be set to expire after a 
30 certain time period, such as a week, year, rental period of the equipment, or other 
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predetermined time period. The biometric scanner may include GPS circuitry or other 
position-determining circuitry, allowing the location of the authorized operator to be 
tracked. The scanner may transmit a location signal at intervals or continuously, or 
only when the authorization signal is transmitted. 
5 The invention is not restricted to the illustrative examples described above. 

Examples are not intended as limitations on the scope of the invention. Methods, 
apparatus, compositions, and the like described herein are exemplary and not intended 
as limitations on the scope of the invention. Changes therein and other uses will occur 
to those skilled in the art. The scope of the invention is defined by the scope of the 
10 claims. 

Patents, patent applications, or publications mentioned in this specification are 
incorporated herein by reference to the same extent as if each individual document 
was specifically and individually indicated to be incorporated by reference. 

Having described our invention, we claim: 
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1 1. An apparatus for allowing operation of equipment by an authorized 

2 operator, the apparatus comprising: 

3 a biometric scanner, the biometric scanner transmitting an authorization signal 

4 while a biometric input is received from the authorized operator; and 

5 an equipment control system allowing the equipment to operate while the 

6 equipment control system receives the authorization signal from the biometric 

7 scanner, the equipment control system preventing the equipment from operating 

8 shortly after the authorization signal is no longer received from the biometric scanner. 

1 2. The apparatus of claim 1, wherein the equipment control system 

2 prevents the equipment from operating within ten seconds of the authorization signal 

3 being no longer received from the biometric scanner. 

1 3. The apparatus of claim 1, wherein the authorization signal is a wireless 

2 signal. 

1 4. The apparatus of claim 1, wherein the biometric scanner includes a 

2 fingerprint reader, the biometric input being an input fingerprint. 

1 5. The apparatus of claim 1, wherein the biometric scanner further 

2 includes a memory, the biometric scanner identifying the biometric input as being 

3 from the authorized operator by comparing the biometric input with stored biometric 

4 data in the memory. 

1 6. The apparatus of claim 1, wherein the equipment control system 

2 includes a deadman switch, the deadman switch being actuated while the equipment 

3 control system receives the authorization signal from the biometric scanner. 

1 7. The apparatus of claim 6, wherein the equipment is a fueling system, 

2 actuation of the deadman switch allowing operation of the fueling system. 
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1 8. The apparatus of claim 7, wherein the deadman switch is an electrical 

2 deadman switch actuated by an electrical signal, the electrical signal being provided 

3 while the equipment control system receives the authorization signal from the 

4 biometric scanner. 



1 9. The apparatus of claim 6, wherein the equipment control system is 

2 located in a fuel truck, and the equipment is a. fueling system allowing transfer of fuel 

3 from the fuel truck to an airplane. 

1 10. The apparatus of claim 6, wherein the fueling system stops operating 

2 within five seconds of the equipment control system no longer receiving the 

3 authorization signal. 

1 11. A process for allowing operation of equipment by an authorized 

2 operator, the process comprising: 

3 receiving a biometric input from an operator; 

4 determining if the biometric input is from the authorized operator; 

5 transmitting an authorization signal as long as the biometric input is provided 

6 by the authorized operator; 

7 operating the equipment only while the authorization signal is transmitted; and 

8 disabling the equipment shortly after the authorization signal is terminated. 

1 12. The process of claim 11, wherein the process is a process for allowing 

2 operation of a fueling system at an airport by an authorized operator. 



1 13. The process of claim 11, wherein disabling the equipment occurs 

2 within ten seconds of the authorization signal being terminated. 
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